
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier: IxXpbZztopWB7B0fdR9hidTDfpYxv0lByZsJ/bsNxeo=
Subject key identifier: 7D:5A:DF:25:C3:5E:B1:E8:62:96:29:62:F2:94:53:9A:67:BA:26:24
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial: 0F04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number: 0EF8
Signing time: Thu 24 Sep 2026 17:35:41 +0000
Manifest this update: Thu 24 Sep 2026 17:35:40 +0000
Manifest next update: Thu 01 Oct 2026 17:35:40 +0000
Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: 6SkqLB1M5hsX9t4D4JxjuBUno/OxMyIc9yOKi5yWSlU=)
2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: dp3B1RDsd11FNh3UQSta7bEw7zg/YxUAJYRv+iUtn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3844 (0xf04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Validity
Not Before: Sep 24 17:35:40 2026 GMT
Not After : Oct 1 17:35:40 2026 GMT
Subject: CN=6ab55f6c-f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:bb:b0:ec:57:7d:9b:42:ca:67:e7:84:0d:
77:db:4b:73:1f:6b:6d:66:5a:22:2d:55:7f:ff:0d:
de:7b:85:cb:a5:f6:cb:71:bb:44:3f:01:cd:5d:94:
bd:dc:ca:cf:ec:f8:82:b7:c9:d9:d9:15:70:f1:e7:
7e:11:ec:1a:66:a1:2c:90:4a:47:45:8a:93:16:3e:
aa:e5:73:44:fe:70:23:bb:9b:f5:29:c0:8e:b0:97:
3c:a0:5f:a5:51:7f:b4:43:79:3e:fd:d4:6a:f4:8f:
e9:f7:95:61:5f:81:fd:6d:94:13:ab:d9:c6:e7:e1:
f4:84:bb:6c:d4:c8:38:ee:66:9d:f5:28:28:32:00:
19:78:34:83:36:65:64:78:79:f0:17:d2:2f:cc:4b:
78:d8:e8:65:6b:f7:01:9e:2a:78:d2:d4:f6:ff:4f:
04:3f:0f:d4:26:09:cd:80:6d:3b:e3:00:79:7d:fb:
34:86:ee:95:c0:81:bf:fe:5f:9a:bd:7c:e2:6f:1b:
58:00:44:f1:b9:8d:c9:74:1b:09:70:b1:00:01:f3:
e2:04:28:af:ae:f1:17:18:29:67:cb:ed:0c:18:f3:
a3:25:95:04:bb:09:e9:b9:fb:2a:77:e7:f4:73:a2:
ce:f1:42:e9:47:f6:94:f2:36:ba:3d:6f:e1:33:83:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:DF:25:C3:5E:B1:E8:62:96:29:62:F2:94:53:9A:67:BA:26:24
X509v3 Authority Key Identifier:
keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:73:d9:31:2d:4c:ba:1e:05:93:e0:dd:5a:33:40:b1:bb:
54:d7:f0:92:2e:f1:5a:b5:64:c0:fd:6c:90:55:43:ba:a8:4d:
e2:64:68:a8:fa:88:3c:ae:4b:00:ed:0e:82:a6:2b:45:03:5e:
70:c5:07:f4:00:83:02:16:52:c5:09:44:dc:ce:b1:47:3f:1c:
1d:5e:e2:b1:57:38:31:bc:9a:a6:97:c8:9c:27:5e:fb:e7:73:
02:8f:4c:eb:b1:5f:e3:56:64:72:62:53:65:df:9d:b8:bf:87:
c7:c7:07:88:b6:e7:e1:21:5a:78:f1:5a:83:26:fe:e5:42:f6:
01:ea:27:8e:2e:df:c2:65:a0:00:8a:66:e8:12:47:95:03:21:
74:e5:c4:d8:c5:1c:e5:75:9b:16:f3:f4:a8:4a:52:96:7a:27:
ee:9f:d5:77:eb:d3:10:53:a8:55:fd:56:c3:ed:23:50:38:4d:
59:f9:a4:df:d3:db:46:dc:dc:52:56:d5:d7:4d:9a:d9:1a:53:
34:fa:6b:c6:79:a2:5b:61:fe:44:04:5d:c9:1b:11:ec:ed:fa:
83:a9:58:98:47:99:66:29:96:fd:2d:c7:92:34:12:68:e8:f1:
45:d7:c6:2e:58:28:92:00:c6:27:b4:ee:2f:e0:20:8d:dc:8b:
d4:bd:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:12 2026 by rpki-client